Test your basic knowledge |

MCTS

Subjects : certifications, mcts, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. How do you enable rdp on a core server?
Use the Programs and Features Control Panel applet to
Se a capture filter based on the mac address of the problem PC.
Run slmgr.vbs -ato and then open up 3389 on windows firewall using netsh.
Not supported

2. The print management console can be configured to _____________.
Usually if the DHCP server is installed as the ad server - if it is a member server then it needs to be assigned manually.
Send email notifications
They restrict disk space usage for users. If you modify the quota template it applies changes to all folders that the template is assigned.
The domain profile not the public or private.

3. Why would you nest WSUS servers?
So the downstream servers can recieve its approved updates via parent server. This allows multiple points of deployment. Downstream servers also can be delegated the permission to approve their own updates
Divide up a large WIM file into multiple smaller .SWM files
Adds a file based zone
The system will shut down. The next time you start this system (after cloning it) - it will install with the settings in the XML file. The Computer Name will be automatically generated.

4. How do you verify your IPV6 address?
Use IPCONFIG or Status Details for the Network Connection.
A tool for controlling the types of content that your computer can access on the Internet. After you turn on Content Advisor - only rated content that meets or exceeds your criteria can be viewed. You can adjust the settings to suit your preferences.
A collection of logs created by computers fowarding events. Viewed on the collecting computer.
By caching reads to remote files over a slow network in the Offline Files (CSC) cache. Subsequent reads to the same file are then satisfied from the client (cache) after verifying the integrity of the cached copy.

5. What can In-Private Browsing not display?
Suggested Sites
Either by placing data on a web server and enforcing ssl to be used to download or by using IPSEC on a file share.
Install and run many Windows XP productivity applications directly from your Windows 7-based PC. It utilizes virtualization technology - such as Windows Virtual PC - to provide a virtual Windows XP Professional SP3 environment for Windows 7 so that o
Use the Cipher.exe command line tool.

6. Can Offline migration be performed on Windows 2000?
Divide up a large WIM file into multiple smaller .SWM files
They need to be configured us use 802.1x RADIUS authentication
Subtract the number of bits in the mask from 32 bits (255.255.255.255). Take the result (x) and have 2 to the power of the result (2^x). Subtract that final result by 2 and that is the amount of host addresses available.
No

7. How do you configure IPSEC between two computers?
NMCAP. You can initiate a packet capture and make a .cap file to replay later. It allows you to accept a .cap files as input useful in parsing traffic by different ports or ip address. Example: NMCap /inputcapture test.cap /capture IPV4.Address ==10.
It is a advertisement of a service. The record is configured with the service provided - a port number and weight?
Specified the version identifer of the back to recover in MM?DD/YYYY-HH:MM format. If the version is unknown wdadmin will get the version.
Use the Advanced Firewall to define Connection Security Rules.

8. How do you install RRAS?
BCD boot file creation and repair tool. The bcdboot.exe command-line tool is used to copy critical boot files to the system partition and to create a new system BCD store.
Extensive Authentication Protocol used in PPP authentication.
You create an answer file and place it on removable media. By default - Windows Setup will search the root directory of all removable media for an answer file called Autounattend.xml.
From the Network Policy Access Services role in system manager.

9. What does Scanstate /OfflineWinOld: C:Windows.old do?
Divide up a large WIM file into multiple smaller .SWM files
Perform an offline migration
Boot to a Windows 7 setup DVD and run System Restore or boot to a System Repair Disk.
Clients establish an IPsec tunnel for the IPv6 traffic to the DirectAccess server - which acts as a gateway to the intranet. The DirectAccess client establishes two IPsec tunnels: Psec Encapsulating Security Payload (ESP) tunnel and IPsec ESP tunnel.

10. How do you configure IPSEC?
A user to submit a print job to a printer and manage their own print jobs through the "Manage Documents" permission granted to the Creator Owners Group. If you grant a user "Manage Documents" - then they can manage ALL jobs submitted to that printer.
Assign a ipsec policy to all computers - verify the computers can manually authenticate. Assign a client respond only IPSEC policy to the computers. Also either the request server or the security server need IPSEC polices assigned.
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.
By creating or modifying a wireless connection in Network and Sharing Center.

11. What is "Transparent Caching"?
Boot the computer with a WINDOWS PE disk that contains a copy of IMAGEX.
Subtract the number of bits in the mask from 32 bits (255.255.255.255). Take the result (x) and have 2 to the power of the result (2^x). Subtract that final result by 2 and that is the amount of host addresses available.
A new feature for Offline Files & Folders. Prior to Windows 7 - to open a file across a slow network - client computers always retrieved the file from the server - even if the client computer had recently read the file. With Windows 7 transparent cac
Enterprise and Ultimate versions. The limitation refers only to the ability to enable protection on a removable storage device. Once BitLocker To Go is added to a storage device - that device can be used normally with any version of Windows 7. It can

12. What do Print permission only allows?
The latest Vista Service Pack
Expose a WIM file contents through Windows Explorer. You can run BCDEDIT.EXE against the mounted image to create or modify the image's boot configuration database.
Use the route delete command.
A user to submit a print job to a printer and manage their own print jobs through the "Manage Documents" permission granted to the Creator Owners Group. If you grant a user "Manage Documents" - then they can manage ALL jobs submitted to that printer.

13. How do you move a Dynamic Disk from one computer to another?
1723
The DHCP server will ping an ip address before assigning it.
Set IE back to its default settings
Use the Import Foreign Disk option on the target computer

14. What is the command line version of windows server backup?
Windows PE and Windows.old.
wbadmin.exe. This can backup critical files.
They are written in XML and be created using the Windows System Image Manager or a text editor like notepad.
It pings with IPV6

15. What does "wbdadmin -startrecovery -version" do?
Streamline and simplify user state migration during large deployments of Windows Vista and Windows 7 operating systems. USMT captures user accounts - user files - operating system settings - and application settings - and then migrates them to a new
they are enforced and will not allow a user to exceed the space limit.
Specified the version identifer of the back to recover in MM?DD/YYYY-HH:MM format. If the version is unknown wdadmin will get the version.
Use the DHCPv6 to obtain both IPV6 addresses and additional configuration settings.

16. Can you choose which media libraries you want to share with your homegroup?
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin
Yes
Restrict the share permissions of the DFS root share.
It contains new capabilities and extensions that you can: Define rules based on file attributes - Create exceptions to rules - Import and export rules - and use audit-only mode.

17. What protocol does NAP enforce when used in 802.1x authentication?
EAP protocol.
Command line equilivant of Server Manager. You can install/remove roles and features on server 2008?
Vista SP1 and Server 2008 and above.
It can be configured to to state the minimum level of system health. Example: To require or not require anitvirus - antipiracy - or firewall to connect to the network.

18. What is required to upgrade Vista to Windows 7?
It can can forward requests from DHCP clients for ip addresses to a remote DHCP server.
A network location.
The latest Vista Service Pack
Windows 7 Professional.

19. What is IPsec ESP tunnel?
It backs up digitally identities to a password protected file.
The Application Identity Service
One of the tunnels if DirectAccess by using both a computer certificate and user credentials. This tunnel authenticates the user and provides access to intranet resources and application servers.
WIndows Update Server

20. How do you capture a computer's hard disk to a .WIM file?
It can can forward requests from DHCP clients for ip addresses to a remote DHCP server.
ISATAP - Teredo and 6to4
WSUS server configuration information - Metadata describing what each update is for - and general information about clients - updates and interaction.
Boot the computer with a WINDOWS PE disk that contains a copy of IMAGEX.

21. What does "wbdadmin -startbackup -allcritical" do?
1723
Backups of the full system including all critical volumes (volumes that contain operating system state).
It create a report of which files will be migrated
This happens because the zone records expire. This occurs because the secondary zone has not successfully zone transferred before the "Expires After" SOA.

22. What does Scanstate /EFS:COPYRAW do?
It sees if your PC is ready for Windows 7. It scans your hardware - devices - and installed programs for known compatibility issues - gives you guidance on how to resolve potential issues found - and recommends what to do before you upgrade.
Who can shutdown a computer
Migrates EFS encrypted files?
Yes - it can be modified to apply to a network location.

23. What is WPA-PSK?
WPA-Personal (uses a preshared key)
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin
It is the authentication header protocol and digitally sign packets but not encrypt them.
A scheduled task that runs by default collecting information for the Reliability monitor. If disabled it must reenabled manually from the task scheduler mmc snapin.

24. Why is PKi needed to encypt vpn traffic?
Deploy a secondary zone.
L2TP uses IPSEC to encrypt VPN traffic - PKI is needed to issue certificates that are required by IPSEC.
Specify this file with both the ScanState and LoadState commands to migrate user folders - files - and file types to computers running Windows Vista or Windows 7.
Increase the SOA refresh interval parameter.

25. What is another way to deploy an application compatibility database across multiple computers?
It create a report of which files will be migrated
Conditional forward
By coping the application compatibility database to a network location and run a logon script that includes SDBInst on each computer - specifying the UNC path of the file.
Yes

26. What does Windows uses the index for?
Updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your computer. This tool replaces FixFAT and FixNTFS.
The requesting of user authentication prior to connecting to the terminal server. This completes the user aoth before reaching the logon screen making the server more secure. This helps fight Denial of Service attacks - malicious users/software.
Boot Configuration Database - Boot Configuration Data (BCD) files provide a store that is used to describe boot applications and boot application settings. The objects and elements in the store effectively replace Boot.ini.
To perform very fast searches of the most common files on your computer. The easiest way to add something to the index is to include a folder in a library. When you do that - the content in that folder is automatically indexed.

27. What is AH?
Adds a file based zone
Install NAP on the computer with the DHCP service.Configure NAP as a RADIUS proxy and forward connection requests to the RADIUS server.
Use dnscmd /recorddelete
It is the authentication header protocol and digitally sign packets but not encrypt them.

28. How do you upgrade windows 7?
Boot the computer with a WINDOWS PE disk that contains a copy of IMAGEX.
WINRM QUICKCONFIG.
All you have to do is purchase an upgrade key from Microsoft or another authorized retailer to unlock those new features.
Turn off the Log Spooler event on a print server.

29. What does importing and exporting rules affect?
Set IE back to its default settings
Is a command-line tool for managing BCD stores. It can be used for a variety of purposes - including creating new stores - modifying existing stores - adding boot menu options - and so on. BCDEdit serves essentially the same purpose as Bootcfg.exe on
Assign a ipsec policy to all computers - verify the computers can manually authenticate. Assign a client respond only IPSEC policy to the computers. Also either the request server or the security server need IPSEC polices assigned.
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin

30. Where are Applocker policies are configured?
Windows 7 Professional.
Through a GPO under Application Control Policies in the Computer Security Settings Node.
WIndows Update Server
They are monitored but not enforced. Users can exced there quota limit.

31. What is a split tunnel VPN?
Creates a bootable CD that runs the Windows Recovery Environment (WRE)
A feature that regularly creates and saves information about your computer's system files and settings. System protection also saves previous versions of files that you've modified. It saves these files in restore points - which are created just befo
Windows 7 Enterprise and Ultimate Editions
It is where Internet access is direct and not routed through the VPN - configure advanced TCPIP network properties and uncheck the option "Use Default Gateway on Remote Network".

32. Windows firewall can be configured to ___________.
Expose a WIM file contents through Windows Explorer. You can run BCDEDIT.EXE against the mounted image to create or modify the image's boot configuration database.
The ICMP protocol.
Drop both inbound and outbound traffic
Either from wbadmin or windows server backup.

33. What are the two primary offline scenarios enabled in USMT 4.0?
Windows PE and Windows.old.
Comes with the Windows Automated Installation Kit (WAIK)
4 (bits 49 - 52) /52 Allows for 16 regions.
To deploy the policy and understand its impact before enforcing it.

34. What is Internet Explorer Content Advisor?
A tool for controlling the types of content that your computer can access on the Internet. After you turn on Content Advisor - only rated content that meets or exceeds your criteria can be viewed. You can adjust the settings to suit your preferences.
Boot the computer with a WINDOWS PE disk that contains a copy of IMAGEX.
To perform very fast searches of the most common files on your computer. The easiest way to add something to the index is to include a folder in a library. When you do that - the content in that folder is automatically indexed.
Use the DHCPv6 to obtain both IPV6 addresses and additional configuration settings.

35. What are IPV6 host records in DNS?
They are AAAA records.
RRAS-VPN/Dialup - Wireless Access Points - Terminal Server Gateway - DHCP - and IPSEC(HRA).
Enable remote management on a computer and create the proper inbound rules on the advanced firewall.
By caching reads to remote files over a slow network in the Offline Files (CSC) cache. Subsequent reads to the same file are then satisfied from the client (cache) after verifying the integrity of the cached copy.

36. What is EAP?
It contains new capabilities and extensions that you can: Define rules based on file attributes - Create exceptions to rules - Import and export rules - and use audit-only mode.
A way of assigning a staic address based on the mac address. This ensures each time the client receives the same address.
Extensive Authentication Protocol used in PPP authentication.
Who can shutdown a computer

37. What happens if the router advertisement has the M flag set to 1?
Use the DHCPv6 to obtain both IPV6 addresses and additional configuration settings.
It will prevent a user from deleting files in a folder. Granting Modify permission to the Creator Owners Group will allow users to delete the files they create but not the files of other users.
You add it back to a DNS zone - clear the server DNS cache and clients DNS cache.
No

38. How does a autoconfiguration router or DHCP assign a IPV6 address (after the Local Link Address)?
One of the tunnels if DirectAccess by using a computer certificate. This tunnel provides access to an intranet Domain Name System (DNS) server and domain controller - allowing the computer to download Group Policy objects and to request authenticatio
Vista SP1 and Server 2008 and above.
First the local link address sends a router discovery packet (Router Solicitation message). If the router request is received then a Public address corrosponding to the global or unique local address prefix in the message.
Setup a GlobalNames zone.

39. How do you set a DNS server to a cache only DNS server?
Delete all the zone files or reinstall the DNS service.
Boot to a Windows 7 setup DVD and run System Restore or boot to a System Repair Disk.
A suite of tools that allow administrators to understand - control - and manage the quantity and types of data stored on the servers.
WPA-Personal (uses a preshared key)

40. What is Bootsect.exe?
Assign a ipsec policy to all computers - verify the computers can manually authenticate. Assign a client respond only IPSEC policy to the computers. Also either the request server or the security server need IPSEC polices assigned.
Updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your computer. This tool replaces FixFAT and FixNTFS.
Use SYNC Center
Use the "Connect to a Workplace" option

41. What are the ESRB Ratings?
L2TP/IPSEC with EAP-TLS.
Default Programs Control Panel applet
A collection of logs created by computers fowarding events. Viewed on the collecting computer.
EARLY CHILDHOOD - EVERYONE - EVERYONE 10+ - TEEN - MATURE - ADULTS ONLY - RATING PENDING

42. What is InPrivate Browsing?
BCD boot file creation and repair tool. The bcdboot.exe command-line tool is used to copy critical boot files to the system partition and to create a new system BCD store.
It enables you to surf the web without leaving a trail in Internet Explorer. This helps prevent anyone else who might be using your computer from seeing where you visited and what you looked at on the web. You can start InPrivate Browsing from the ne
Delete all the zone files or reinstall the DNS service.
Specify this file with both the ScanState and LoadState commands to migrate user folders - files - and file types to computers running Windows Vista or Windows 7.

43. What should you use for enhanced wireless security?
Pool Active Directory.
You will be prompted to reconnect online. To disable offline mode - select it from the Tools menu.
Comes with the Windows Automated Installation Kit (WAIK)
Use WPA with AES encryption. WPA-Personal requires a preshared key and WPA-Enterprise uses Radius Authentication.

44. How do you setup Windows 7 setup to run unattended?
SSL
Netsh set dnsserver. Example: netsh interface ipv4 set dnsserver name="Local Area Connection" source=static address=192.168.0.100
You create an answer file and place it on removable media. By default - Windows Setup will search the root directory of all removable media for an answer file called Autounattend.xml.
It backs up digitally identities to a password protected file.

45. How do you configure WSUS computer groups for defined updates?
It is submitted to Microsoft for "device signing" to ensure the driver was adequately tested and will not affect the integrity of the operating system. Critical files are digitally signed so that any changes to these may be easily detected. However n
Use the net sh command to configure the proper ports for remote management.
Updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your computer. This tool replaces FixFAT and FixNTFS.
By either using WSUS management console (server side targeting) or GPO (client side targeting).

46. What sites support Integrated Windows Authentication?
Either from wbadmin or windows server backup.
You will be prompted to reconnect online. To disable offline mode - select it from the Tools menu.
WSUS server configuration information - Metadata describing what each update is for - and general information about clients - updates and interaction.
Only sites added to the local Intranet Zones

47. Where is scavaging configured?
L2TP/IPSEC with EAP-TLS.
On the zone file of the DNS server in the DNS manager.
On the properties of the DNS server in the DNS manager.
It is the authentication header protocol and digitally sign packets but not encrypt them.

48. What is the command to set a collecting computer for event log forwarding?
WECUTIL QC
Either from wbadmin or windows server backup.
A CA users trust or they will get error messages when trying to securely access a web site. They can avoid the error by installing the CA certificate to the Trusted Root Certificate Store.
Through Group Policy at Computer configuration | Administrative Templates | Network | Offline Files | Enable Transparent Caching.

49. How do you determine if your PC's ip and its default gateway are on the same network?
4 (bits 49 - 52) /52 Allows for 16 regions.
The command used to preform an offline defrag. Example: jetpack DHCP.mdb temp.mdb
Take the ip address and use the AND command on the calculator to AND the ip address and the subnet. NOTE: AND each octet separately. Then AND the gateway and the subnet. If the AND results are the same you are on the same subnet.
So you can use a system management solution - such as Microsoft System Center Configuration Manager 2007 - to deliver the database to multiple computers and then use the SDBInst.exe command-line tool to install the database. The SDBInst command-line

50. How do you need to configure the NAP enforecment points if using in conjenction with NPS?
WPA2 and 802.1x but require EAP-TLS to be enable.
IPSEC
Configure the enforcement points as RADIUS clients.
Not supported